Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: VDfpfmg7i7eH57JDzmDhIi3SSE69EFwAEgtVXmYU33I=
Subject key identifier: A9:E7:F5:04:1A:C0:A1:59:BC:F3:3B:BC:60:1B:FF:71:50:44:E3:75
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 0197499F0A6146B3254B3BE2ACF5984BA733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 09F8
Signing time: Sat 07 Jun 2025 09:00:49 +0000
Manifest this update: Sat 07 Jun 2025 09:00:49 +0000
Manifest next update: Sun 08 Jun 2025 09:00:49 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: plz6Q5bKKAav3FS7AQUEyNDShWqDdHrcJlZYzng5fUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0a:61:46:b3:25:4b:3b:e2:ac:f5:98:4b:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Jun 7 09:00:49 2025 GMT
Not After : Jun 8 09:00:49 2025 GMT
Subject: CN=a9e7f5041ac0a159bcf33bbc601bff715044e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:a9:70:5d:a2:56:08:79:99:4b:09:35:59:
b3:f2:76:13:6b:b9:5d:a0:23:13:e7:2e:b3:80:fc:
62:60:7c:2b:94:5f:21:2a:3e:af:f4:99:20:04:00:
5b:a8:bd:57:8b:ce:90:77:d8:db:43:2c:de:62:30:
58:a2:1a:b2:88:13:c6:d4:f4:1b:6f:60:de:b6:87:
f4:93:9b:9e:c3:bf:60:c1:bf:00:30:be:ea:47:0a:
61:d1:0f:c5:e2:8e:86:89:f4:08:57:3b:e5:ae:89:
4a:00:a4:12:41:a0:2a:f0:f8:f2:77:a3:2e:9e:cd:
f4:ed:2f:56:ab:64:fa:e6:a7:3b:90:72:b0:cd:c8:
57:ad:6b:6b:9f:00:48:87:b1:ce:77:6c:7f:dc:c6:
ed:0d:74:97:50:1b:f6:8d:83:6c:c2:5b:8b:13:dd:
65:61:23:ee:50:f0:a4:74:b2:c8:35:9f:b0:76:5a:
28:43:7b:71:16:a2:6a:66:b1:22:4b:4f:a6:ec:c6:
cc:b5:3f:10:e1:9b:fb:ce:ae:9f:f2:3b:f2:80:7f:
0d:85:b6:80:cb:86:1f:36:c7:7f:41:a3:35:9d:c3:
dc:26:d0:be:c5:90:4f:5c:cf:1d:28:1b:cc:d4:7f:
54:8c:d2:2c:88:cb:e8:9b:6c:6b:d1:9d:7f:99:a5:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E7:F5:04:1A:C0:A1:59:BC:F3:3B:BC:60:1B:FF:71:50:44:E3:75
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a8:2e:da:a7:63:a3:94:e1:7b:5f:de:c6:10:ab:2b:65:aa:
22:b1:a2:5d:a5:58:78:f0:76:4a:fe:fb:fc:2f:5b:85:45:dd:
89:0a:10:bc:36:6b:f0:a7:d6:08:f2:3f:9f:96:40:98:ac:d0:
70:8b:40:5b:42:e7:f1:be:9c:0f:b9:d4:1f:e3:9b:d8:3a:1f:
12:3c:88:06:a2:1b:50:89:99:74:24:9d:60:03:c4:92:1f:8e:
bd:6d:fc:4e:a8:4c:52:00:7e:14:35:73:81:ca:ed:fb:77:57:
d7:f9:eb:9c:9c:1e:13:a3:9e:ba:89:51:b6:30:b1:2e:f2:2a:
c9:98:ad:cc:38:46:e0:d8:ee:e4:e0:c4:68:34:b8:67:eb:2e:
54:dd:86:31:82:0c:9c:30:43:78:f0:f3:fb:8f:9d:70:1f:01:
dd:c3:a0:81:79:3a:1c:e5:73:28:31:a6:65:43:62:36:37:a3:
a0:f2:d8:22:92:cd:01:09:8c:aa:ce:77:2b:bc:ca:63:fd:09:
69:69:84:b7:eb:ed:6d:bc:0b:54:14:b3:c4:fc:eb:dd:8d:1b:
3f:31:03:0e:3d:f4:8e:7d:93:6a:e2:9e:9b:5b:8c:df:d7:c9:
36:60:be:8e:4e:68:4e:22:0f:19:79:a1:03:b4:3f:a8:46:7a:
15:b4:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:41 2025 by rpki-client